Medium
CVE-2016-4826
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2016-4825
Welcart e-Commerce < 1.8.3 - Object Injection
Critical
CVE-2016-4828
Welcart e-Commerce <= 1.8.2 - Authentication Bypass
Medium
CVE-2016-4827
Welcart e-Commerce <= 1.8.2 - Cross-Site Scripting
Unrated
378
Universal AJAX Live Search - Other
Critical
8ada8a27-752c-4726-b330-895b967ea290
WordPress File Upload < 3.9.0 - Arbitrary File Upload
Medium
76d96ab1-e667-4242-aee3-95f8dfb07ccd
WordPress File Monitor <= 2.3.3 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2016-1000112
Contus Video Comments <= 1.0 - Remote File Upload
High
8530affb-0b6e-4b71-acab-3561cccc1855
Advanced Access Manager <= 3.2.1 - Unrestricted AJAX Actions allowing Privilege Escalation
High
CVE-2016-10968
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 1.6.1 - Privilege Escalation
Medium
CVE-2016-10705
Jetpack <= 4.0.3 - Cross-Site Scripting
Medium
4fbeee29-751a-48c9-a875-393441f62dde
Lingotek Translation <= 1.1.8 - Cross-Site Scripting
High
CVE-2016-10969
SupportFlow <= 0.6 - Stored Cross-Site Scripting via discussion ticket title
Medium
CVE-2016-5833
WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name #2
Medium
CVE-2016-5838
WordPress Core < 4.5.3 - Password Change via Stolen Cookie
Medium
CVE-2016-5837
WordPress Core < 4.5.3 - Authorization Bypass to Remove Category Attribute
Medium
CVE-2016-5834
WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name
High
CVE-2016-5839
WordPress Core < 4.5.3 - Bypass sanitize_file_name Protection
Medium
CVE-2016-5836
WordPress Core < 4.5.3 - Denial of Service via oEmbed Protocol
Medium
CVE-2016-5832
WordPress Core < 4.5.3 - Cross-Site Scripting via Customizer
Medium
CVE-2016-5835
WordPress Core < 4.5.3 - Revision History Disclosure
Medium
2cff84a4-9264-4789-997b-bc11a8bac449
Ultimate Product Catalog <= 3.8.1 - Missing Authorization to Plugin Settings Update
Medium
69bdd5e6-1334-42bc-a13f-215eb61733e7
Contus Video Comments <= 1.0 - Authorization Bypass
Medium
48d0e0e0-81db-46ef-ba64-daa2a4079b79
Yoast SEO <= 3.2.5 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.